CVE-2026-53263

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An off-by-one error exists in the lowpan iphc mcast ctx addr compress() function. The second memcpy operation incorrectly uses &data[1] as the destination and &ipaddr->s6 addr[11] as the source, instead of &data[2] and &ipaddr->s6 addr[12]. This results in the corruption of the RIID field in the compressed multicast address and causes uninitialized kernel stack memory to be transmitted over the network via lowpan push hc data(), leading to a leak of kernel stack contents.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.